Bug 16555 - No validation when entering WiMP account info
: No validation when entering WiMP account info
Status: VERIFIED FIXED
Product: MySqueezebox.com
Classification: Unclassified
Component: WiMP
: Test
: PC Windows XP
: P1 critical (vote)
: Lunik
Assigned To: Michael Herger
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-09-16 13:27 UTC by Kris Murphy
Modified: 2010-09-20 09:00 UTC (History)
2 users (show)

See Also:
Category: ---


Attachments
No account validation (104.82 KB, image/jpeg)
2010-09-16 13:27 UTC, Kris Murphy
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Kris Murphy 2010-09-16 13:27:05 UTC
Created attachment 6972 [details]
No account validation

It would seem that the app doesn't check to verify that the account info being
entered is correct, or even valid.

I was able to "successfully add" a WiMP account both via mysqueezebox.com and
Duet using completely bogus info and it "added" anyway.  No error is
encountered until the user gets all the way to a track he/she wants to play, at
which time they will see an error message saying "Your were logged out because
you logged into Wimp somewhere else".  

This is going to be very confusing for a customer who accidentally enters
incorrect WiMP account info.  They will really have no idea what's going wrong
since the message they see simply says they logged in somewhere else.
Comment 1 SVN Bot 2010-09-17 05:15:54 UTC
 == Auto-comment from SVN commit #8857 to the network repo by mherger ==
 == http://svn.slimdevices.com/network?view=revision&revision=8857 ==

Fixed Bug: 16555
Description: add validation when useraccount/password are edited
Comment 2 Kris Murphy 2010-09-17 16:25:44 UTC
It looks like this is fixed for mysqueezebox.com, but when I try to enter WiMP on a device with no WiMP account info in mysqueezebox.com, I can no longer enter the account info via the device.  All I get is a message saying "WiMP  Invalid phone number or password"

Steps to repro:
1. Add WiMP to My Apps in mysqueezebox.com
2. Delete any associated WiMP accounts
3. Enable WiMP on a device
4. Navigate to WiMP on a device
Expected:  Used to get prompts for entering WiMP account info
Actual:  Just get the error "WiMP Invalid phone number or password", no prompt for data entry.
Comment 3 Michael Herger 2010-09-19 21:40:26 UTC
reopening - need to check credentials for all page handlers separately in order to allow reaching the setup screen on device
Comment 4 SVN Bot 2010-09-20 01:42:33 UTC
 == Auto-comment from SVN commit #8867 to the network repo by mherger ==
 == http://svn.slimdevices.com/network?view=revision&revision=8867 ==

Fixed Bug: 16555
Description: allow entering the WiMP menu with invalid credentials, defer check to page handlers. Main page handler will show the "Enter credentials" screen instead of an error message.
Comment 5 Kris Murphy 2010-09-20 09:00:38 UTC
Working great!  Thanks Michael.